IT Engineer, US

Ema

7d

About The Position

Ema is building the Universal AI Employee, and we expect our own operations to run the same way. We're hiring our first dedicated IT Engineer to own corporate IT end to end: identity, devices, SaaS and compliance across 200+ devices in the US, UK, Canada and India. This isn't a help desk role. You'll run IT while systematically automating it, using agentic tooling to remove manual work rather than absorb it. Success is measured by how little of the job is still manual after a year, and how good every employee's IT experience is.

Requirements

• A strong instinct to eliminate repetitive work, with hands-on use of AI coding tools
• 2–4 years in IT systems, endpoint or identity engineering
• Hands-on Okta (or similar IdP) and Google Workspace administration
• Working knowledge of SSO, SAML, OIDC and SCIM
• Mac endpoint management experience (Kandji or similar)
• Python or Bash scripting, with at least one shipped automation you can walk us through
• Strong troubleshooting across identity, SaaS and networking
• Precise documentation, clear written communication and sound judgment on security and compliance risk

Nice To Haves

• Okta Workflows or an iPaaS (Workato, Tines, Zapier)
• SOC 2 / ISO 27001 experience
• AWS/GCP admin or Terraform
• Okta or Kandji certifications

Responsibilities

• Treat every recurring task as an automation candidate, building workflows with Python, Bash, APIs, Okta Workflows and AI coding tools
• Own the joiner, mover and leaver lifecycle with People Ops via Rippling → Okta → SCIM, moving it from tickets to policy-driven automation, including access reviews
• Administer Okta, Google Workspace, Slack and Atlassian; configure SSO (SAML/OIDC), SCIM and MFA across all apps
• Manage the Mac fleet in Kandji: enrollment, automated OS patching, encryption baselines and continuous drift detection
• Maintain SaaS inventory and usage programmatically, and reclaim unused licenses automatically
• Generate evidence for SOC 2, ISO 27001 and AI governance frameworks continuously, as a byproduct of automated operations
• Maintain runbooks, a knowledge base and an integration registry; provide Tier 1/2 support within defined SLAs
• Be the go-to for Finance and HR on tool access, licensing, renewals and billing

Benefits

• Compensation offered will be determined by factors such as location, level, job-related knowledge, skills, and experience. Certain roles may be eligible for variable compensation, equity, and benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed